This is a manual cherry-pick of #24304

This updates the nodejs and jquery versions used in bookinfo. This is the master version of #24289

1.4, 1.5, and 1.6 are all based on bookinfo 1.15.0. Master advances to 1.16.0.

Testing done:

Manually tested that all three star versions show up when viewing the website
make test passes
No errors in the browser console.
Note that many tests expect the bookinfo images to already exist and the images do not get built in the pull request process. These tests will fail until the images exist.

This fixes:

NodeJS

• CVE-2019-15606: HTTP header values do not have trailing OWS trimmed.
• CVE-2019-15605: HTTP request smuggling using malformed Transfer-Encoding header.
• CVE-2019-15604: Remotely trigger an assertion on a TLS server with a malformed certificate string.
• CVE-2020-11080: HTTP/2 Large Settings Frame DoS
• CVE-2020-10531: ICU-20958 Prevent SEGV_MAPERR in append
• CVE-2020-81720: TLS session reuse can lead to host certificate verification bypass

jQuery

• CVE-2016-9251 jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
• CVE-2019-11358 jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.
• CVE-2020-11022: Potential XSS vulnerability in jQuery
• CVE-2020-8174: napi_get_value_string_*() allows various kinds of memory corruption